From db66509e66ebb1127bae86fe976a7e2cdddd4dd4 Mon Sep 17 00:00:00 2001
From: Martin Probst <martin@probst.io>
Date: Mon, 27 Jun 2016 12:18:48 -0700
Subject: [PATCH] test(security): tests for HTML5 elements, srcset.

Part of #9572.
---
 .../platform-browser/test/security/html_sanitizer_spec.ts | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/modules/@angular/platform-browser/test/security/html_sanitizer_spec.ts b/modules/@angular/platform-browser/test/security/html_sanitizer_spec.ts
index b2226f9567..9348ccb31c 100644
--- a/modules/@angular/platform-browser/test/security/html_sanitizer_spec.ts
+++ b/modules/@angular/platform-browser/test/security/html_sanitizer_spec.ts
@@ -42,6 +42,14 @@ export function main() {
       t.expect(sanitizeHtml('<a xlink:href="javascript:foo()">t</a>'))
           .toEqual('<a xlink:href="unsafe:javascript:foo()">t</a>');
     });
+    t.it('supports HTML5 elements', () => {
+      t.expect(sanitizeHtml('<main><summary>Works</summary></main>'))
+          .toEqual('<main><summary>Works</summary></main>');
+    });
+    t.it('sanitizes srcset attributes', () => {
+      t.expect(sanitizeHtml('<img srcset="/foo.png 400px, javascript:evil() 23px">'))
+          .toEqual('<img srcset="/foo.png 400px, unsafe:javascript:evil() 23px">');
+    });
 
     t.it('supports sanitizing plain text', () => {
       t.expect(sanitizeHtml('Hello, World')).toEqual('Hello, World');